Questions tagged [rogue-ap]
A rogue AP is an unauthorized wireless access point placed on a network to allow access to the network it is attached to.
11
questions
0
votes
1
answer
101
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
3
votes
2
answers
165
views
Is it foolish to trust a Wi-Fi network just because it uses a specific recognized SSID?
This article in the Avira (part of NortonLifeLock) security blog discusses (vaguely) security risks of public Wi-Fi. The article states:
Man in the middle attacks are also a very prominent threat, ...
0
votes
1
answer
136
views
How and what can attackers use Rogue AP attacks for? [closed]
I have some questions about rogue access points.
How attackers can get victim's creds over secured HTTPS websites?
Can attackers do this kind of attack only by using basic tools + sharing the AP ...
- 36
0
votes
0
answers
150
views
Man in the middle after evil twin
I've set up an Evil twin access point using the aircrack suite, what i'm missing is how to complete the man in the middle access point side like the picture shown below, I've been suggested ettercap ...
1
vote
2
answers
544
views
Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?
I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
- 475
2
votes
2
answers
240
views
WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?
We are using, as default, PEAP and MS-CHAPv2 as inner authentication.
I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
- 21
0
votes
0
answers
32
views
evil twin like attack [duplicate]
Is it possible to make a fake AP with the same SSID that has a password and when clients try to access it and type a password, the software verifies it with a handshake?
3
votes
1
answer
3k
views
Can you detect a wifi pineapple or rogue AP with MAC address?
This posting has some good advice for tracking rogue access points:
Tracking down a rogue access point
The issue I have is that many will not work for a huge deployment. I'd like to build a device ...
- 1,859
23
votes
2
answers
6k
views
Rude neighbor with PineAP or something similar
For the past week or so I've been having problems with wifi in my house, and it appears that my neighbor set up a Pineapple or something similar that is running a known beacon attack and/or Karma/...
- 330
1
vote
0
answers
235
views
Can not create an "evil twin access point" with the same SSID as the original
I am practising pen-testing for a while now and I have a kali Linux 2017.2 physical machine. I tried to create an evil twin access point using tools like fluxion, wifiphisher and wifi-pumpkin. Note ...
- 11
2
votes
1
answer
232
views
Find rogue access point if area is saturated with networks
What do you do if you scan for rogue Access Points and find that the area is saturated by surrounding businesses with their own wifi?
I recently scanned for wifi networks and found 60+ networks just ...
- 23